ID:2578 - Exploit for Command Injection in Archer A7 - CVE-2020-10882

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary commands on the target system.

The vulnerability exists within the "tdpServer" service due to the process does not properly validate a user-supplied string before using it to execute a system call when parsing the "slave_mac" parameter. A remote attacker on the local network can execute arbitrary commands on the system.

Remediation